security.ids.snort.sigs (date)

security.ids.snort.sigs (date)

November 30, 2003

Re: Rule to capture only packets with certain content/bytes, Brian
some rules missing from sig-msg.map, Russell Fulton

November 28, 2003

Re: PCRE Rules and hexa, Brian
Re: from_client == to_server ?, Matt Kettler
keywords "tag" and "session", Cedric Foll
from_client == to_server ?, Martin Olsson

November 26, 2003

sid:1841 / Question about within: x, nard
Searching for the latest Snort rules, Marc Ruef
PCRE Rules and hexa, Cedric Foll

November 25, 2003

snort-rules STABLE update @ Tue Nov 25 13:15:16 2003, bmc
Can I still log every packet when thresholding the alerts?, Williams Jon
snort-rules CURRENT update @ Tue Nov 25 13:15:16 2003, bmc

November 24, 2003

Re: Snort details for SID 1937, Nigel Houghton
Re: Snort details for SID 1937, Brian
Re: Behavioral-based detection, Matt Kettler
Snort details for SID 1937, Christopher Davis
RE: Newbie question on traffic, Joshua Wright

November 22, 2003

Behavioral-based detection, Цвиркун Д.В.

November 21, 2003

Re: Newbie question on traffic, Brian
snort-rules CURRENT update @ Fri Nov 21 13:15:18 2003, bmc
snort-rules CURRENT update @ Thu Nov 20 19:15:18 2003, bmc

November 20, 2003

Newbie question on traffic, William_Metcalf@xxxxxxxx
Re: Error with current rules via oinkmaster [snortrules-current], Matt Kettler

November 19, 2003

Re: [Snort-devel] False SNMP missing community string alerts, Daniel J. Roelker

November 18, 2003

Re: swatch / sig issue, Edin Dizdarevic
RE: swatch / sig issue, Nick Duda
RE: Rule for detecting MS Exchange SMTP AUTH LOGON b rute force attemp ts., Grejda, Eric

November 17, 2003

Re: Re: More about shell code rules, Russell Fulton
Re: sid 1748 needs retuning, Brian
Re: Re: More about shell code rules, Brian
Re: Sig for MS03-051, Brian
Re: Re: More about shell code rules, Russell Fulton
Re: Re: More about shell code rules, Curt Wilson
swatch / sig issue, Nick Duda
Re: Rule for detecting MS Exchange SMTP AUTH LOGON brute force attemp ts., Brian
Re: More about shell code rules, Curt Wilson
Error with current rules via oinkmaster [snortrules-current], David A. Koran

November 14, 2003

More about shell code rules, Russell Fulton
Re: sid 1748 needs retuning, Russell Fulton
sid 1748 needs retuning, David Wilburn
Re: shell code rules, Matt Kettler

November 13, 2003

shell code rules, Russell Fulton
RE: Sig for MS03-051, Frank Knobbe
Re: good settings for portscan preprocessor?, James Riden
Re: RE: FTP brute force login signature, James Riden
RE: Sig for MS03-051, Frank Knobbe
Rule for detecting MS Exchange SMTP AUTH LOGON brute force attemp ts., Grejda, Eric
RE: Sig for MS03-051, Adams, Samuel (contractor)
RE: RE: FTP brute force login signature, adam.w.hogan
ms03-049 proof of concept detected by x86 NOOP sig, William_Metcalf
good settings for portscan preprocessor?, David Wilburn

November 12, 2003

Sig for MS03-051, Frank Knobbe
RE: FTP brute force login signature, Milani Paolo

November 11, 2003

RE: rules and protocol URL, Federico Castañeda
RE: Snort Rules, adam.w.hogan
Snort Rules, Mandar S. Dalvi
ms 03-046 rule, Johnathan Norman

November 10, 2003

Re: rules and protocol URL, Jason Haar
Re: rules and protocol URL, Edin Dizdarevic
Re: rules and protocol URL, Matt Kettler
rules and protocol URL, Nosnos
Nicholas Cross is out of the office., Nick . Cross

November 07, 2003

Sig for streaming audio/video, Salinas Samuel E SSgt 355 CS/SCBI
RE: Re: [Snort-users] Who doesn't care about virus rules, and why?, Nick Duda
RE: [Snort-sigs] RE: Who doesn't care about virus rules, and why?, Abe Use
Re: [Snort-users] Who doesn't care about virus rules, and why?, Nick . Cross
Re: SNORT rule for Hacker Defender?, Chris Kronberg
Re: Mail Alert, Erek Adams
Mail Alert, Jayachandran K

November 06, 2003

snort-rules CURRENT update @ Thu Nov 6 13:15:19 2003, bmc
SNORT rule for Hacker Defender?, Johnson, Scott
RE: Who doesn't care about virus rules, and why?, Williams Jon
RE: Who doesn't care about virus rules, and why?, Jason Haar
Re: Who doesn't care about virus rules, and why?, Snortty
Re: Who doesn't care about virus rules, and why?, Iain Hallam
RE: Who doesn't care about virus rules, and why?, Williams Jon
RE: capture email, Erek Adams

November 05, 2003

A tool like swatch, Sir Fenix
User/Pass in LDAP, Kbellco Mail
Welchia/Nachi rule, Schmehl, Paul L

November 04, 2003

RE: welchia rule, Schmehl, Paul L
inc ebx NOOP Shellcode detection statefulness?, Curt Wilson
Re: Bug in matching engine ?, Chris Green
rules update question, Nick Duda
RE: capture email, Ricardo Londono
missing SIDs, SoloNet Newsfeed Processor
Re: capture email, Ricardo Londono

November 03, 2003

Bug in matching engine ?, Cedric Foll
Re: [Snort-sigs] anyone have a good Swen sig, Brian A Kee
Thresholding in 2.0.2?, Jacob Roberts
capture email, Ricardo Londono
New MiMail infection signature, Ken Bell

November 01, 2003

Re: Swen sigs, Martin Overton

News | FAQ | advertise